[Samba] NT_STATUS_OBJECT_NAME_NOT_FOUND
Carlos
carlos.hollow at gmail.com
Tue May 25 18:01:23 UTC 2021
I found which GPo was in the ldap base but not on the disk (via
samba-tool gpo listall | grep ID), so I accessed the GPO manager and
deleted the entry, run the Sysvol sync and then run the sysvolreset, and
ran no errors (only those in the idmap range, but which can be ignored).
I believe that was the problem. :-D
Thank you all so much for your help.
Have a great week.
Em 25/05/2021 14:02, Carlos escreveu:
> I disclude myself I believe I caused a confusion, at the end of the ls
> -ltr in the mey sysvol, I did not put all of it because I thought it
> would be a lot (I clicked the ... to surprise this, but it was clearly
> not a good choice).
> Yes, I have 56 GPOs saved to disk:
>
> ls -ltr /usr/local/samba/var/locks/sysvol/$(hostname -d)/Policies|grep
> ^d|wc -l
>
> 56
>
> But in ldbsearch i have 57
>
> ldbsearch -H ldap://"$(host -t SRV _ldap._tcp.pdc._msdcs."$(hostname
> -d)" | awk '{print $NF}' | awk -F '.' '{print $1}')" -P -b
> "CN=Policies,CN=System,$
> (echo "DC=$(hostname -d)" | sed 's/\./,DC=/g')" -s sub
> '(objectClass=groupPolicyContainer)' cn | grep 'cn:' |wc -l
> 57
>
> Knowing this, I found the "ID (GPO)" that exists (out of ldbserach)
> but that is not on the disk
>
> {F5ED8DAD-6BBB-4B5B-A6F1-BE1FC33F498D}
>
> But, how delete entry in ldap ?
>
>
> regards
>
>
> Em 25/05/2021 12:36, Rowland penny via samba escreveu:
>> On 25/05/2021 16:13, Carlos via samba wrote:
>>> I checked the FSMO and tooas are pointing to the correct DC (and
>>> only to him), but I saw that in the DNS there were two entries for
>>> the PDC question, I removed the wrong one (leaving only the correct
>>> DC), and he executed the right command .
>>>
>>> I have 18 Dcs , which is causing problems and in the new one (in
>>> this case, what I called DC2 here)
>>>
>>>
>>> ldbsearch -H ldap://"$(host -t SRV _ldap._tcp.pdc._msdcs."$(hostname
>>> -d)" | awk '{print $NF}' | awk -F '.' '{print $1}')" -P -b
>>> "CN=Policies,CN=System,$(echo "DC=$(hostname -d)" | sed
>>> 's/\./,DC=/g')" -s sub '(objectClass=groupPolicyContainer)' cn |
>>> grep 'cn:'
>>> cn: {517AE483-57E6-48B1-A9D8-DD4D7039D469}
>>> cn: {1F1D65A3-2DFD-491D-A844-D4D448520B2E}
>>> cn: {FC942ADA-CF96-4186-8942-322E045EE018}
>>> cn: {16071A9D-29DA-4CC5-90F8-1DC2BEE37DB1}
>>> cn: {6140C55E-E459-4B43-9071-D4244581BB9D}
>>> cn: {D5E1A2D1-070D-4DEB-A84F-32EFB68F8988}
>>> cn: {A98110BB-FF15-485A-86E8-1D18FC529F82}
>>> cn: {F100B212-EFF9-4E70-850A-411CECA54F74}
>>> cn: {7B507AB4-3463-4BFD-A859-3A95B52D48B4}
>>> cn: {16034E74-5F06-45EB-B778-0155BAC76EED}
>>> cn: {31B2F340-016D-11D2-945F-00C04FB984F9}
>>> cn: {B27F4E18-A83A-4B4C-BF95-992D17DE4356}
>>> cn: {B59AD5F3-C408-44A8-B520-E6C2274430A0}
>>> cn: {80C1D392-60EA-4558-BFDB-661E1128013B}
>>> cn: {BC36848B-3A6F-4BFB-B01A-BCE61A363205}
>>> cn: {2E488814-1084-4845-B68E-C38D60B476B8}
>>> cn: {C5B1194F-6DE8-4970-958A-96AEFF3F2F43}
>>> cn: {D448A7E7-22D8-4BEC-82E7-F73748AA7154}
>>> cn: {8842F75C-A136-42F0-BFEC-04B69D638168}
>>> cn: {889231A7-0199-4E7B-BE07-989D6095FD43}
>>> cn: {9E661234-529F-4287-8471-AAE5C68887B4}
>>> cn: {BBAC22FE-0437-49E5-A02A-D7D3C3CEE120}
>>> cn: {023F6920-DB5A-42A1-9FB7-43BDA9F60E59}
>>> cn: {2D2962FF-9D69-45F4-B2AC-7EDC19DD07B5}
>>> cn: {46367B44-346C-422E-AFB7-0A95EF896B78}
>>> cn: {F35825C8-B31A-4587-B3BC-962CAF1EE837}
>>> cn: {3BD1FBA6-32C7-43FA-911B-E383A8893A6C}
>>> cn: {99C7FA72-C4DD-4E08-BD34-82207FD6DB2C}
>>> cn: {474579AB-E1DD-48E9-8AFA-A590FEE2DECE}
>>> cn: {6342D129-B4C9-4155-BB98-B17435E5F396}
>>> cn: {4B9C1BA3-CA31-4F8A-8D27-3F387ECFEB14}
>>> cn: {D79B199C-B2CC-4A0C-A0AB-DBF6C8C9FBAC}
>>> cn: {F2A558C2-BE27-4ED3-B672-BB9724925AF1}
>>> cn: {7113698E-37E8-4032-A872-D837E03DA8F9}
>>> cn: {66EC17D5-97B0-469E-B0F1-DC239240102A}
>>> cn: {1C7ED877-F6DE-4418-B29D-3FC612CF3021}
>>> cn: {A0C2DBB8-64CB-4339-992E-055B7E10BE60}
>>> cn: {F5ED8DAD-6BBB-4B5B-A6F1-BE1FC33F498D}
>>> cn: {E9862430-D0D3-46C0-88DA-DB4915942961}
>>> cn: {BD719720-4036-41A8-9467-CF83611D59B5}
>>> cn: {5CE3F48F-F206-4569-9A79-4EEE6A01D994}
>>> cn: {04288E43-AF21-431C-B469-FCE404B8AACD}
>>> cn: {4C43A8BB-1414-4D9F-9D49-F07B8DCB21B3}
>>> cn: {A41C13B1-F655-421A-9F21-DA48E645A757}
>>> cn: {56ADB9BA-327F-4854-A9BC-249FA777F50A}
>>> cn: {B0D11970-E7A0-4548-B396-DF9F43814A30}
>>> cn: {E016F5CD-C850-4C91-9E40-61F7D1651970}
>>> cn: {8EE8ECFD-AD9F-464F-8317-69FD946D074D}
>>> cn: {3827FE58-5B69-47FB-AC70-4D7628028413}
>>> cn: {5DA55F19-6998-4DC5-A560-C7B9CB0A45FA}
>>> cn: {6C53454A-25C7-4264-8300-31351E682D2E}
>>> cn: {45DDD552-E86A-4AA0-BC02-EC077F1EA952}
>>> cn: {E311C0A2-8F30-436B-94F0-036134C47AB1}
>>> cn: {149AD731-C29D-41E7-B1D4-1DECA7DBED58}
>>> cn: {6AC1786C-016F-11D2-945F-00C04FB984F9}
>>> cn: {9D89DF4E-FFC6-4651-8E1F-97E2D4DCDB0D}
>>> cn: {00E54E3A-386D-4880-A9E7-ED0CE4F4A237}
>>>
>>> ---
>>>
>>> ls -ltr /usr/local/samba/var/locks/sysvol/$(hostname -d)/Policies
>>>
>>> ....
>>>
>>> ....
>>>
>>> drwxrwx---+ 4 XXX\domain admins XXX\domain admins 4096 May 3 2019
>>> {2E488814-1084-4845-B68E-C38D60B476B8}
>>> drwxrwx---+ 5 XXX\domain admins XXX\domain admins 4096 Aug 19 2019
>>> {9E661234-529F-4287-8471-AAE5C68887B4}
>>> drwxrwxr-x+ 4 XXX\domain admins XXXX\domain admins 4096 Sep 4 2019
>>> {F35825C8-B31A-4587-B3BC-962CAF1EE837}
>>> drwxrwx---+ 5 XXX\domain admins XXXX\domain admins 4096 Sep 4 2019
>>> {D448A7E7-22D8-4BEC-82E7-F73748AA7154}
>>> drwxrwx---+ 5 root BUILTIN\administrators 4096 Sep
>>> 4 2019 {E016F5CD-C850-4C91-9E40-61F7D1651970}
>>> drwxrwx---+ 5 XXX\yusef.sad users 4096 Dec 3
>>> 2019 {99C7FA72-C4DD-4E08-BD34-82207FD6DB2C}
>>> drwxrwx---+ 5 XXX\domain admins XXXX\domain admins 4096 Dec 5 2019
>>> {023F6920-DB5A-42A1-9FB7-43BDA9F60E59}
>>> drwxrwx---+ 4 XXX\domain admins XXXX\domain admins 4096 Dec 5 2019
>>> {80C1D392-60EA-4558-BFDB-661E1128013B}
>>> drwxrwx---+ 5 root BUILTIN\administrators 4096 Dec
>>> 5 2019 {5CE3F48F-F206-4569-9A79-4EEE6A01D994}
>>> drwxrwx---+ 5 XXX\domain admins XXXX\domain admins 4096 Dec 5 2019
>>> {B59AD5F3-C408-44A8-B520-E6C2274430A0}
>>> drwxrwx---+ 5 XXX\domain admins XXXX\domain admins 4096 Feb 24 2020
>>> {8842F75C-A136-42F0-BFEC-04B69D638168}
>>> drwxrwx---+ 4 root BUILTIN\administrators 4096 May
>>> 7 2020 {00E54E3A-386D-4880-A9E7-ED0CE4F4A237}
>>> drwxrwx---+ 5 root BUILTIN\administrators 4096 Sep
>>> 16 2020 {45DDD552-E86A-4AA0-BC02-EC077F1EA952}
>>> drwxrwx---+ 4 root BUILTIN\administrators 4096 Apr
>>> 15 09:04 {E311C0A2-8F30-436B-94F0-036134C47AB1}
>>> drwxrwx---+ 4 root BUILTIN\administrators 4096 Apr
>>> 15 10:23 {6C53454A-25C7-4264-8300-31351E682D2E}
>>> drwxrwx---+ 5 XXX\domain admins XXXX\domain admins 4096 May 20
>>> 15:16 {D79B199C-B2CC-4A0C-A0AB-DBF6C8C9FBAC}
>>> drwxrwx---+ 5 XXX\domain admins XXXX\domain admins 4096 May 21
>>> 16:28 {1F1D65A3-2DFD-491D-A844-D4D448520B2E}
>>> drwxrwx---+ 5 XXX\domain admins XXXX\domain admins 4096 May 24
>>> 14:55 {149AD731-C29D-41E7-B1D4-1DECA7DBED58}
>>
>>
>> Do you think that having 57 GPO's in AD and only 18 on disk in sysvol
>> might have anything to do with your problem ???
>>
>> 'NT_STATUS_OBJECT_NAME_NOT_FOUND' is another way of saying 'Cannot
>> find a policy'
>>
>> How did you create the GPO's and where ?
>>
>> Rowland
>>
>>
>>
More information about the samba
mailing list